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Abstract — We propose a novel encoding scheme for algebraic 
codes such as codes on algebraic curves, multidimensional cyclic 
codes, and hyperbolic cascaded Reed-Solomon codes and present 
numerical examples. We employ the recurrence from the Grobner 
basis of the locator ideal for a set of rational points and the two- 
dimensional inverse discrete Fourier transform. We generalize the 
functioning of the generator polynomial for Reed-Solomon codes 
and develop systematic encoding for various algebraic codes. 

I. Introduction 

Heretofore, there have been some researches on the encod- 
ing of codes on algebraic curves, although they are fewer 
than researches on the decoding of codes. Heegard et al. 
[1] proposed an encoding for linear codes with nontrivial 
automorphism groups by using Grobner bases for modules 
over polynomial rings, which was applied by Chen et al. [3]. 
Matsumoto et al. [4] proposed another encoding for codes on 
curves, based on the linear combination of extended Reed- 
Solomon (RS) codes by the work of Yaghoobian et al. [5]. 

In this research, we propose a novel encoding scheme for 
various algebraic codes; this scheme is considered to be the 
natural generalization of the well-known encoding for RS 
codes. We first establish a simple but non-systematic encoding 
that employs two-dimensional (2-D) inverse discrete Fourier 
transforms (IDFT) and that generalizes the encoding for RS 
codes by using one-dimensional IDFT (that is, the Mattson- 
Solomon polynomial). Since the syndromes correspond to the 
discrete Fourier transform (DFT), we also obtain a concise 
decoding via Berlekamp-Massey-Sakata (BMS) algorithm. 
Next, we establish systematic encoding in the sense of the 
separation of given information and generated redundant in a 
resulting code-word. This second method of encoding employs 
a Grobner basis and its 2-D linear feedback shift-register 
and corresponds to the Euclidean division by the generator 
polynomial in the case of RS codes. 

Both the methods often employ the enlargement of the 
finite-field arrays to the entire plane by the elements of 
Grobner bases, typically, the defining equation of the algebraic 
curves. As a more essential idea of our encoding and decoding 
scheme, we can mention the following duality for substitution 



Then, the rational points having any zero are exceptional; 
however, they can be treated similarly to the case of lengthened 
RS codes as shown in section [Villi 

II. Codes on algebraic curves 

Let Zo denote the set of non-negative integers. Let X denote 
a non-singular C^ algebraic curves over K := ¥ q for a, b £ Zo 
with a < b and gcd(a. b) — 1. Then, the genus of X is given 
by g := (a — l)(b — l)/2, and X has only one A'-rational 
point at infinity P^. We fix a primitive element a of K. Let 
V = {Ph}o<h<n denote a set of if-rational points of the form 
Ph = (a r ,a s ), i.e., non-zero coordinates. We construct codes 
of symbol-field K on pj's in V; iT-rational points whose 
coordinates include zero are considered in section IVIIII We 
define a subset <f> m of Zq as 



<q-l, j <a, ai + bj < m}, 



where ai + bj is equal to the pole order o(x l y 3 ) of x % y 3 at 
Poo. In this study, we consider codes on algebraic curves 

C(m) := {(c h ) GK n \c(a i ,a j )=0, (i,j) G $ m } , (1) 

where c(x, y) := 53a=o °h z h with monomials Zh ■= x r y s for 
Ph = (a r . a s ). For simplicity, we assume m > 2g — 2; then, 
we obtain n — k — m — g + 1 = U$ m . 

Elementary encoding: The condition {c(a l , a 3 ) = 0} in ([TJ 
is equivalent to the ordinary linear system 



(Ch)o<h<n [zh(Ql)] 



<h<n, 0<l<n-k 



0. 



(2) 



where Qi :— (a 1 , a?) for S Q m with order I <V ai+ 
bj < ai' + bj'. An encoding method for C(m) is the use of the 
generator matrix G := [ Ek \ —H ] , where Ek is the (k x k) 

TJ 

identity matrix and H is obtained from 



E n - 



by the row 



transform of [zh{Qi)] and, if needed, the order-changing of 
V. Then, we can systematically encode information symbols 
(^ k )o<k</c to a code-word (c h ) := (I K )G. However, this 
requires the multiplication of (k x (n — k)) matrix H. Thus, 
our goal should be to eliminate the matrix-multiplication from 
the encoding algorithm. 

On the other hand, with regard to the computing of syn- 
dromes, the situation is similar but better than the above 
encoding because of (HJ. We suppose that an error-vector 



(a) Information (b) Extension by x -y = y 
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(g) Subtraction (e) — (f) (f> BMS algorithm 
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(c) Inverse discrete Fourier transform 
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(e) Discrete Fourier transform 
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(d) Received word 
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Fig. I. Flow chart of a non-systematic encoding by IDFT and a decoding by BMS algorithm with DFT for Hermitian code C(ll) over GF(3 2 ); the shaded 
values in (c) and (d) indicate the values on the X -rational points with non-zero coordinates. Array (c) represents a code-word and array (g) indicates that 
three errors have been corrected. 



(e/i) has occurred during the transmission of (c/J and we 
have received a word (r^) :— (c/J + (e^). Then, the syn- 
drome decoding requires the (n — k) values of syndrome 
(fh) [zh{Qi)\, which agree with (r(Qi)) for our expression of 
C(m). This generalizes the syndrome-calculation for RS codes 
by the substitution of the roots of the generator polynomial. 
Hence, we consider an effective encoding method based on 
our definition (Q]l of C(m). 

III. Encoding by 2-D discrete Fourier transform 

In this section, we provide the example of a Hermitian code 
over K := Fg with defining equation y 3 + y = x A of genus 
g = 3, the minimal pole order (first non-gap) a = 3, and 24 
if-rational points of xy ^ and finite. The primitive element 
a is fixed to satisfy a 3 + a + 1 = 0, and the non-zero element 
a 1 (0 < i < 8) is simply denoted as i (resp. zero as —1). Note 
that —a = a 4 ^ a . We represent 24 Fg -rational points as 
monomials {x r y s \ (a r ,a s ) £ P}, which correspond to the 
shaded boxes of (c) in Fig. Q] 

Let $ C Zg be the support of a Grobner basis of the ideal 
I v := {f e K[X] | f{P h ) = 0, P h e P}, i.e., $ corresponds 
to the set of monomial representatives of K[X]/I-p, where 
K[X] = K[x,y]/(y 3 + y - x 4 ). Then, we have (1$ = $P. 
For Hermitian codes on non-zero coordinates, $ agrees with 
{(i, j) € Zq I i < q— 1, j < a}; in general, $ is its subset. We 
arrange the information symbols {I(i.j)) on $\$ TO , and then 
obtain (I(i,j))(i,j)e® by considering := if £ $ m , 
as (a) in Fig. Q] Furthermore, the Grobner basis of I-p extends 

( 7 (»j))(«j)e* into for (hi) e z o with < iJ < 

q-1; for Hermitian codes, I {i+a+1 d - a) - I {l j- a +i) =■ 
from the defining equation, as shown in Fig.[Tfb), where i :— 
i mod (q — 1) if i > q — 1. 

To encode (Iuj\), we perform the 2-D IDFT for (7^ ^): 

0<Lj<q-l 0<i,j<q-l 



Then, by substituting Ph = (a r ,a s ) into I(x,y), we have 
Cft := c (r . jS ) = Y I(i, 3 )x(Phy l y{PhY J (3) 

0<i,j<Q— 1 

= I(P h ) for I(x, y) := ^ I (g-t-i,g-i-j) x ' l y : ' ■ 

0<i,j<q-l 

Theorem 1: We have C( r . s ) = if there is no P/, 6 P 
with Ph = (a r ,a s ). Moreover, the transform OJ defines an 
injective linear map and a code-word (ch)o<h<n S C(m). 

We omit the proof and discuss RS-code case in section IVT1 

The received word (rh)o<h<n is viewed as (raj)) for < 
i, j < q — 1 and run :— Th if there is Ph 6 P with Ph = 
(a l ,aj); otherwise raj) := (cf. Fig. Ed))- 

The syndromes from the received word (r^) can be obtained 
by the substitution of (a l ,aP) for G $ m into r(x,y), as 
described in Section [TT] In our framework, it is convenient, as 
shown in Fig. Q2 e X to substitute the entire {(i, j)}o<i.j<q-i> 
which can be considered as the DFT (r(a l , 
Then, we have r(a 1 ,a : ') = e(a l ,a : ') + I(i.j) through the 
error polynomial e(x,y) := Y^h=o e h z h and the extended 
information symbols (Iuj)) because of our encoding and the 
2-D Fourier inversion formula 

0<r,s<q-l 0<i,j<q—l 

We notice that the values (e(a l ,a : ')) are not yet known 
for G since Iu j) ^ outside <£>.,„. To ob- 

tain and subtract all syndrome-values (e(a 4 ,a J )) for < 
i,j < q — 1 from (r(a 4 , a 7 )), we run the BMS algorithm 
to calculate the Grobner basis of the ideal Ig, where £ 
denotes the set of error locations. Since the Grobner basis 
provides the 2-D linear recurrence formula for syndromes, 
we can extend (e(a 4 , ct J ))(i.j)e$ m to the entire plane, where 
the array (f) represents the result. Finally, as illustrated in 



(h) Information 



(i) Discrete Fourier trans. 



(j) Extension by Grobner basis 

and subtraction from (i) 00 Inv. discrete Fourier trans. 
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(o) Subtraction (m) — (n) and 
inv. discrete Fourier trans. 



(n) BMS algorithm 



(m) Discrete Fourier trans. 



(1) Received word 
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Fig. 2. Flow chart of systematic encoding by Grobner basis, decoding by BMS algorithm with DFT for code C(ll); array (k) represents a systematic 
code-word and array (o) indicates that the correct information has been obtained. 



Fig.fTfg), the information (I(i,j))(i,j)e®\<s> m ( anc ^ i ts extension 
(%,j))o<i,j<g-i) is obtained by (e) minus (f). 

Thus, DFT is utilized for both the encoding and computing 
of syndromes; the decoding consists of two steps, i.e., this DFT 
and BMS algorithm to remove the syndrome-values, without 
Chien search and error-evaluator formula. 

IV. Systematic encoding 

Since the conventional RS codes are usually encoded 
systematically, it is natural to consider effective systematic 
encoding for codes on algebraic curves. However, while the 
roots of the generator polynomial can be considered a subset 
of locations in RS code-words, it does not hold in general for 
our C(m) since actually {Qi}o<i<n— k *t- P- In this section, 
we apply Theorem Q] and its argument to this problem and 
obtain a satisfactory solution. 

As preliminaries, we choose p and p' so that p U p' = V, 
p n p' — 0, and (tp = n — k; p is the redundant-point set 
and is considered to satisfy p = {Ph}o<h<n-k without loss 
of generality, and p' is the information-point set. We calculate 
the Grobner basis of the ideal I p in advance. In the example 
of Fig. |2j the shaded boxes in (h) indicate p', and we obtain 
the Grobner basis by the BMS algorithm as follows: 

I -1 I -1 I I 1 5 1 -1 1 I 5 I 7 I 4 I I I I -1 I 

-1^H_ 3 7_ J 3_ Zizl ' 

iL J- 



where, for example, the leftmost array represents the polyno- 
mial 1 + x 4 . For simplicity, we assume that the support of 
the Grobner basis for I p is generic [6], that is, the support 
corresponds to L(mP 00 ); this assumption is not very strong 
since the generic support has the probability {q — l)/q. 

Then we represent k information symbols {I(i,j)}(i,j)ep' 
as shown in Fig. |2jh). To generate the redundant part of the 



code-word, we first compute its DFT {Iuj) }o<i,j<q-i by 
hid) ■=I(a i ,oe>) for I(x,y) := ^ J(i,j) x V, (4) 

and then, we extend {I(i,j)}(i,j)e$ m (nine values in Fig. EJi)) 
on the support into {I(i,j)}o<i,j<q-l on the entire plane by 
the Grobner basis (*), or more precisely, by its recursive 
formula (O in section I VIII If we perform IDFT for the 
negative {—Iu,j)} of the extended array, the redundant part 
can be obtained since the resulting values on p' are zero 
by Theorem Q] and their DFT (i.e., syndrome) agrees with 
{~ ^(i,j)}(i,j)e* TO - If we perform IDFT for the subtraction 
ihhi) ~ ^(»,j)}o<».J<?-i ( p ig- Eli))- Le -> we compute 

0<i,j<q-l 

then {c(v, s )} is a code-word in C(m) since c(a l ,a J ) = 
— — for £ <£> m . Moreover, it is systematic, 
as observed at Fig. 0k), and in fact we have cr r ^ — Ic r , s ) 
for (a r ,a s ) € p' since the IDFT of Iuj) vanishes at p' by 
Theorem Q] 

While the error-value estimation was performed by using 
the IDFT of (n) in [8], it is efficiently incorporated into our 
procedure. In the encoding of Section Hill each procedure 
of encoding and decoding contains either the DFT or IDFT. 
Although in this section, each step of encoding and decoding 
requires both the DFT and IDFT, we can use only one DFT 
calculator for all transforms in practical circuits for the encoder 
and decoder. 

Recall that the systematic matrix-encoding described in 
Section HH requires multiplications of the k x (n — k) matrix; 
our method requires the calculators of the 2-D feedback 
shift-registers and memory-elements for at most a x (n — k) 
coefficients, which correspond to the (n — k) coefficients of 
the generator polynomial for RS codes. 



(p) Information 



(r) Extension by Grobner basis 
(q) Discrete Fourier trans. an( J subtraction from (q) ( s ) I nv - discrete Fourier trans. 
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(w) Subtraction (u)— (v) and 
inv. discrete Fourier trans. 



(v) BMS algorithm 



(u) Discrete Fourier trans. 



(t) Received word 
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Fig. 3. Flow chart of systematic encoding by Grobner basis, decoding by BMS algorithm with DFT for a hyperbolic cascaded RS code; array (s) represents 
a systematic code-word. The shaded values in (t) denote the values with errors added in the channel. Array (w) indicates that four errors have been corrected. 



V. Application to HCRS codes 

Our encoding and decoding scheme is widely applied to var- 
ious algebraic codes such as 2-D cyclic codes and hyperbolic 
cascaded RS (HCRS) codes; for these codes, the encodings in 
sections 3 and 4 are similarly performed except for the total 
order in the BMS algorithm. Here, we deal with the systematic 
encoding of HCRS codes. 

In this section let <£> m := £ Zq | + + < m}. 

A HCRS code [2] over K := ¥ q is defined as 

C(m) := {(cr, a )o<r,«<g-i | c(a\a 1 ) = 0, e $ m } , 

where c(x,y) := X)oo s<q-i c r.sX r y s - Then, the minimum 
distance d of C(m) is bounded as d > m. In Fig.[3j C(9) over 
Fg is demonstrated for four-error correction. 

The non-systematic encoding is equal to the IDFT of (p). 
To encode systematically, we first compute a Grobner basis 
of an ideal {/ e R \ f{a\ a 3 ) = 0, G $ m }, where 

R := Klx^yyix^ 1 - l.y^ 1 - 1,), with respect to a total 
order -< (i',f) 

+ + < + or 
(* + 1)0 + 1) = (i' + l)(j' + l) A j<f. 

The elements of the basis that is needed for the extension in 
the systematic encoding are shown below. 

2 I 6 I I 2 I 4 I 1 I I 1 I 1 1 -1 I i~| I 2 I 5 I 4 I 2 I 4 | 

_5 i_ J_JL_2_ J Lzl_L J 1 6 j 

_4__0_ J 3_ o 

_2__6_ 
_4_ 

Then, the values after DFT on $ m in (q) are extended by 
the recurrence formula similar to ©. Thus, the IDFT of (r), 
where (r) equals (q) minus the extended array, is a systematic 
code-word (s). 

To decode a received word (t) from the channel, we perform, 
for syndrome values on in (u), the BMS algorithm with 



respect to the total order (^) [2]. In the case of our example, 
the error-locator polynomials are expressed as follows. 

1 | 3 | | 3 4 | | 2 5 | 

0^ -1_ 2^ 

_4_ _6_ _7_ 



The recurrence similar to (0 by the above basis extends the 
syndrome values on Q m to the entire plane, as Fig. Ov). 
Finally, the IDFT of (u — v) in Fig. [3] provides the correct 
transmitted word Fig. |3jw). 

VI. The case of RS codes 
Recall the encoding for RS codes by Euclidean division: 

c(x) := I(x) - R(x) = Q(x)G(x), deg(R) <n-k, (5) 

where I(x) = 5Z <«<n is an information polynomial 
with = for < k < n - k; G(x) = (x - 1) • • • (x - 
a"~ k ~ 1 ), the generator polynomial; R(x), the remainder of 
the division with quotient Q(x). Then, it is apparent that (ct) 
from c(x) = J2o<h<n c h x ' 1 is a code-word of the RS code 

C(m) := {(c h ) Q < h<n e F; 1 j c{a l ) = 0, < i< m} 

with n := q — l and m := n — k — 1. This method is systematic, 
i.e., Ch = Ih for n — k < h < n. 

If we have received a polynomial c[x) — X/0<h<n c h x ^ — 
c(x)+e(x) containing an error polynomial e(x) in the channel, 
the values of syndromes {e(a K )}o< K <n-fe can be computed 
as {c(a K )} by substituting the roots of G(x) into c(x). We 
notice that c(a K ) = J2o<h<n Ch& K,h can be also considered 
to be the DFT of {ch}- Thus, we obtain another encoding 
method (non-systematic) by the IDFT c/,. := J2o<i<n ^i a ~ %h ■ 
Then, (ch)o<h<n is another code-word of C(m) since 

c ^')= E E ha- ih+i ' h = {q-l)I il . 

0<h<n 0<i<n 

It is possible to systematically encode by using an alter- 
native procedure. From (01, we obtain I(a K ) — R(a K ) for 
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Fig. 4. Flow chart of systematic encoding by Grobner basis and DFT for code C(ll) on all finite GF(9)-rational points (including zero components) of the 



Hennitian curve y A 
< K < n 

inductively by 



■ y = x 4 ; array (aa) represents a systematic code-word in C(ll) 

k. Moreover, we define array (dh)o<h<n 



dh ■= 



I(a h ) 

En—k—1 
i=0 UiS 



< h < n - k, 
i+h-(n-k) n - k < h < n, 



where G(x) = Ya=o 1 GiX % 



dh = Y^lZo^ 1 Ri alh with R(x) = Yl,i=Q ^ Ri x% not onr y 

for < h < n — k but also for n — k < h < n. Thus, the IDFT 
(— d(a~ 1 )) for (dhioKhKn is observed to agree with of 
R(x) by using Fourier inversion formula; c(x) := I(x) — R(x) 
again indicates the encoding, and moreover we obtain two 
ways of calculating R{x), i.e., a commutative diagram. 



Then, it follows that 

n — k—l 



I(X) 
Remainder 

R(x) 



DFT 



I(a K ) 



IDFT 



Extension 



(<**) 



Thus, we obtain two encoding methods for RS codes, which 
we have generalized. 

VII. Recursive formula from Grobner basis 
We generate {Iu^} for < i, j < q — 1 recursively from 
{I(i,j)}(i,j)e® as in the encoding at Section 11111 and [TVl which 
is stated here more precisely. It may be assumed that we have 
the support $ m C < i < q — 1, < j < a} and that 

each Grobner basis consists of a + 1 elements {/''• > }o<t<a U 



x tL y L with i t 



{g}, where /W = E(ij)e*« 

max{i + 1 1 (i, t) € $ m } and 3 = 9(i,j) x "W + 

Then the recurrence for (r, s) g" <I> m is defined as follows: 

j, s) := { _ /(Vj/^iH^M 4 -') s = ^ (6) 

\ ~ E(i,i)e* m 3(i,j)%i)+(r, s )-(0,a) s > a. 

The resulting values do not depend on the order of the 
generation because of the property of Grobner bases. 

VIII. Treatment of locations including zero 

With regard to the systematic encoding in Section 4, we 
can treat locations including zero in a manner similar to 
the case of non-zero locations. There are three Fg -rational 
points ( — 1,-1), (—1,2), and (—1,6) for our example of 
Hermitian codes, which are denoted by the shaded boxes 
in the top row of Fig. SJx). Although we cannot compute 
the DFT for three information symbols at these locations, 
we note that if an error 1 — a a has occurred on, e.g., 
(—1,-1), then the syndrome values are all —1 except for a 



at (0, 0) G $ since they are computed by the substitution of 
(—1,-1) into {x l y :i }o<i t j<q-i- We also note that the IDFT 
of {x 1 y : '}\^ X y) = ^_i t _i) equals an 8 x 8 all-a° array. Thus the 
analogue of DFT is obtained for information 7 at (—1,-1) as 
only 7 at (0, 0) G $. Similarly, the analogue is obtained for 
information 5 at (— 1, 2) as only [5, 7, 1, 3, 5, 7, 1, 3] in the first 
row of $, which also equals the one-dimensional (1-D) DFT 
for [—1, —1, 5, —1, • • • , —1]; for information 2 at (—1, 6), the 
analogue is obtained as [2, 0, 6, 4, 2, 0, 6, 4] at the top, which is 
also the 1-D DFT for [—1, • • • , —1, 2, —1]. Hence, we obtain 
the analogue of DFT for the array (x) as the array (y) by 
summing and obtain the redundant part of the code-word (aa) 
by the IDFT of the extended array (z). Notice that the IDFT 
of (y — z) such as in Section 4 provides the sum of the parts 
of the code-word on $ and the IDFT of the analogue arrays 
of DFT, i.e., all-a 7 array, all- ( — 1 ) array except [1, • • • , 1] T in 
the third column, which is the IDFT of {a 5 x*?/ : '}|( x .j / ) = (_i.2), 
and all-(— 1) except [6, • • • , 6] T in the seventh column. 

Thus, we have completed the treatment of locations includ- 
ing zero components. 

Acknowledgment 
This work was partly supported by the Academic Frontier 
Project for Future Data Storage Materials Research by the 
Japanese Ministry of Education, Culture, Sports, Science and 
Technology (1999-2008), Toyota Physical and Chemical Re- 
search Institute, and Storage Research Consortium (SRC). 

References 

[1] C. Heegard, J. Little, K. Saints, "Systematic encoding via Grobner bases 
for a class of algebraic-geometric Goppa codes," IEEE Trans. Inf. Theory, 
vol.41, no.6, pp.1752-1761, Nov. 1995. 

[2] K. Saints, C. Heegard, "Algebraic-geometric codes and multidimensional 
cyclic codes: a unified theory and algorithms for decoding using Grobner 
bases," IEEE Trans. Inf. Theory, vol.41, no.6, pp. 1733-1751, Nov. 1995. 

[3] J.-R Chen, C.-C. Lu, "A serial-in-serial-out hardware architecture for 
systematic encoding of Hermitian codes via Grobner bases," IEEE Trans. 
Communications, vol.52, no. 8, pp. 1322-1332, Aug. 2004. 

[4] R. Matsumoto, M. Oishi, K. Sakaniwa, "Fast encoding of algebraic ge- 
ometry codes," IEICE Trans. Fundamentals, vol.E84-A, no. 10, pp.25 14- 
2517, Oct. 2001. 

[5] T. Yaghoobian, I. F. Blake, "Hermitian codes as generalized Reed- 
Solomon codes," Designs, Codes and Cryptography, vol.2, pp. 5-17, 1992. 

[6] H. Matsui, S. Mita, "Footprint of polynomial ideal and its application 
to decoder for algebraic-geometric codes," Proc. Int. Symp. Information 
Theory and Its Applications (ISITA), pp. 1473-1478, Oct. 2004. 

[7] H. Matsui, "Efficient encoding methods for codes on algebraic curves," 
Proc. 29th Symp. Information Theory and Its Applications (SITA), pp.97- 
100, Nov. 28-Dec. 1, 2006. 

[8] S. Sakata, H. E. Jensen, T. H0holdt, "Generalized Berlekamp-Massey 
decoding of algebraic geometric code up to half the Feng-Rao bound," 
IEEE Trans. Inf. Theory, vol.41, no.6, Part I, pp. 1762-1768, Nov. 1995. 



